Sam A. samsapti
  • https://samsapti.dev
  • Software Developer, Privacy Advocate and Digital Minimalist

  • Joined on 2022-05-23
samsapti commented on issue data.coop/ansible#206 2024-03-16 21:22:05 +00:00
Forgejo/Gitea Actions

The process inside the container does not run as root, but it still has access to the Docker socket (on our production VM!), unless we opt to use Docker-in-Docker which is also insecure due to the…

samsapti pushed to main at samsapti/lab-ansible 2024-03-16 19:29:27 +00:00
87b2c7db56 Add Snowflake to sapt-labc-pub01
samsapti pushed to main at samsapti/lab-ansible 2024-03-16 19:27:24 +00:00
75059adb10 Merge vaults
samsapti pushed to main at samsapti/lab-ansible 2024-03-16 18:59:26 +00:00
2817aac98c Naming
samsapti pushed to main at samsapti/lab-ansible 2024-03-11 21:32:04 +00:00
9d32448a73 proxy_pass overwrites Host header if it's not in the location block
samsapti closed issue data.coop/ansible#19 2024-03-08 20:29:18 +00:00
Migrate OpenLDAP volumes to bind mounts
samsapti closed issue data.coop/ansible#55 2024-03-08 20:28:16 +00:00
Status page
samsapti commented on issue data.coop/ansible#206 2024-03-08 20:11:50 +00:00
Forgejo/Gitea Actions

Seconded! In that case, and since we're gonna be using VMs, why not set up a dedicated runner VM with rootless Docker? That way, we can avoid it having access to our production Docker socket.

ht…

samsapti pushed to main at samsapti/samsapti.dev 2024-03-06 18:04:48 +00:00
c13af7cd90 Upgrade theme and add Signal username
samsapti approved data.coop/ansible#202 2024-03-04 14:03:23 +00:00
Restic: send an email on backup failure

LGTM 💯

samsapti commented on pull request data.coop/ansible#202 2024-03-04 13:03:33 +00:00
Restic: send an email on backup failure

@reynir To: admin-hold@data.coop

samsapti commented on pull request data.coop/ansible#202 2024-03-04 12:05:57 +00:00
Restic: send an email on backup failure

Wrong email (perhaps a services.restic.mail_to is appropriate?) 😉

samsapti suggested changes for data.coop/ansible#202 2024-03-04 12:05:57 +00:00
Restic: send an email on backup failure

One last thing (v2.0) 😃

samsapti commented on pull request data.coop/ansible#202 2024-03-04 11:22:17 +00:00
Restic: send an email on backup failure

Let's use {{ smtp_host }} here 😄

samsapti suggested changes for data.coop/ansible#202 2024-03-04 11:22:17 +00:00
Restic: send an email on backup failure

One last thing, then it's approved 💯

samsapti commented on pull request data.coop/ansible#202 2024-03-03 20:43:52 +00:00
Restic: send an email on backup failure

Our email is admin@data.coop 🙂

samsapti commented on pull request data.coop/ansible#202 2024-03-03 20:43:52 +00:00
Restic: send an email on backup failure

I suggest restic@noreply.{{ base_domain }} or backup@noreply.{{ base_domain }} instead. Also, let's keep the syntax style with underscores, so mail_from instead of mail-from.

samsapti commented on pull request data.coop/ansible#202 2024-03-03 20:43:52 +00:00
Restic: send an email on backup failure

Please change this line to use spaces instead of tabs, and have it on the same indentation level as the above lines.

samsapti commented on pull request data.coop/ansible#202 2024-03-03 20:43:52 +00:00
Restic: send an email on backup failure

This needs to be with a : instead of = like the rest of the variables.

samsapti suggested changes for data.coop/ansible#202 2024-03-03 20:43:52 +00:00
Restic: send an email on backup failure

Some suggestions and minor things that need to be fixed, otherwise great work!